remove apt-get upgrade; unattended-upgrades would do this better for us